Users unable to surf, very bad connection. need help

[zorg1983]

Hello All,

I have a strange situation. i have a client who own FGT 300C with version 5.2.0. this is a 5 floor building that on each floor

they have FAP from models , 210B , 220B , 221C. i have looked and saw that all the FortiAP profiles had the wrong country so i have created new ones and added the correct profile. also i have upgraded the access points to the latest version. this was yesterday. the client reported today the situation got worse. i would like to get help how to fix this problem. where to start.

Joe.

[Dave_Hall]

Hi Joseph.

When you upgrade the firmwares on the AP, make sure these new firmwares are compatible with the Fortigate's own firmware.  Also, it may be a good idea to upgrade the firmware on the fgt itself as well.  (It's always a good idea to review the firmware patch notes of both devices for compatibility.)

You'll need to have the client clarify the issue(s) they are having. A typical laundry list of questions may something look like this...

[ul]

Do the APs have a solid connection to the fgt?

Are there interference from other APs in area? (enable Rogue scanning on fgt)

Can users/devices see the SSID(s)?

Can users/devices connect to the SSID but not authenticate.

Is the SSID interface merged with the LAN interface?

Is the DHCP IP lease pool maxed out? Is devices getting valid IPs?

Does this issue effect wired connected users?

Do users/devices keep loosing connection to AP/SSID?

Does setting up static IP information on device resolve issue?

etc.[/ul]

Try to determine the scope of the problem:

[ul]

Connection between device and AP/SSID

Connection from AP to Fortigate (wireless controller)

Firewall policy[/ul]

The Wifi & Switch Controller Monitor section is a good place to start with troubleshooting...

 

Give the Deploying Wireless Networks a review for further information.

[emnoc]

Also to add Dave analysis, I would suggest to look at  the connect speed and any SNR ( signal noise ratio) issues. If you have major packet lost and poor speeds, the wireless radio channel and SNR is going to be a big factor.

[Bromont_FTNT]

How is the performance on 5GHz? You could create a test SSID that would only be configured on the 5GHz radios... If 5Gig is better then it's likely interference on the 2.4gig band... How many APs per floor? You may need to turn the power way down to 5% on 2.4GHz

[emnoc]

FWIW

A spectrum analyzer and monitoring of channels duty cycle &  SNR for your footprint would probably be the best thing within in AP overlay. A SNR 25db or better is ideal. The fortigate as a Wireless AP controller probably don't have the logic  of a dedicated WLC which is probably going to be the #1 low point imho.

.

The problem with the move to 5ghz  crowd, you don't necessarily fix the problems within overly used 2.4ghz you just ignore or operate outside of that band and channel plan & then you have to factor in a lot device still lack  true   5GHZ support,  granted almost everything modern and from a respected vendor supports 5ghz radios (e.g 802.11ac)  i.e phone tablets laptops.